CVE-2022-0847-L-nux-PrivEsc

CVE-2022-0847 Descrizione - POC per CVE-2022-0847: Vulnerabilità di escalation locale dei privilegi del kernel Linux. - creato da antx il 2022-03-08. Dettagli - Il ricercatore di sicurezza Max Kellermann ha divulgato in modo responsabile la vulnerabilità 'Dirty Pipe' e ha dichiarato che colpisce...

CVE-2020-9332

CVE-2020-9332 Beschreibung Ein anfälliger Bustreiber in FabulaTech „USB for Remote Desktop“ und „USB over Network“ ermöglicht es Benutzern mit niedrigen Berechtigungen, ein vollständig kontrolliertes Software-USB-Gerät hinzuzufügen, das von einem Angreifer verwendet werden kann, um unter bestimmt...

Cisco RoomOS Buffer Overflow (cisco-sa-roomos-bof-vTMANZgu)

According to its self-reported version, Cisco RoomOS Software is affected by a vulnerability. - A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary code with root privilege...

CVE-2020-1048

CVE-2020-1048 Codice exploit POC per CVE-2020-1048PrintDemon Sistemi Vulnerabili Tutte le versioni di Windows indicate nel link sono vulnerabili: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 Passaggi per riprodurre 1. Modificare le variabili gPortName e...

CVE-2024-10930

Divulgazione CVE: CVE-2024-10930 Divulgazione pubblica di CVE-2024-10930 Data: 12-02-2025 Riepilogo È stata identificata una vulnerabilità nel prodotto Carrier E20-BLK416X.EXE versione 4.16, che potrebbe consentire l'escalation dei privilegi locali. A questo problema è stato assegnato...

CVE-2020-24088

CVE-2020-24088 Escalation dei privilegi in Windows Un problema è stato scoperto nella routine MmMapIoSpace di Foxconn Live Update Utility 2.1.6.26, che permette a utenti malintenzionati locali di aumentare i privilegi. Link CVE - https://vulners.com/cve/CVE-2020-24088...

CVE-2021-3493

CVE-2021-3493 Escalada Local de Privilégios no OverlayFS do Ubuntu Versões Afetadas Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Uso gcc exploit.c -o exploit ./exploit Descrição "Problema específico do Ubuntu no sistema de arquivos overlayfs no...

msi-central_privesc

CVE-2022-38532 Privilege escalation locale nell'applicazione desktop MSI Center. La vulnerabilità risiede in "CFeatures" di MSI.CentralServer.exe. MSI.CentralServer.exe è un'applicazione che raccoglie informazioni sul sistema, collaborando con MSI.TerminalServer.exe. La funzione ExecuteTask, che...

CVE-2021-25253

root@kitploit: Exploit Title: Trend Micro OfficeScan Client 10.0 - ACL Service LPE Date: 2023/05/04 Exploit Author: msd0pe Vendor Homepage: https://www.trendmicro.com My Github: https://github.com/msd0pe-1 Trend Micro OfficeScan Client: Le versioni = icacls "C:\Program Files x86\Trend...

CVE-2026-56651 Arbitrary File Overwrite via Symlink Following in dool project

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

CVE-2026-56651

Dool (a shell utility for managing shell history) in versions up to 1.3.8 is vulnerable to symlink following when the --devel flag is used. The application opens its log file without the O_NOFOLLOW flag, allowing a local attacker to place a symlink at the expected log path pointing to a sensitive...

CVE-2026-80544

A flaw was found in the Linux kernel's s390/zcrypt component. The zcryptmsgtype6sendep11cprb function, responsible for handling EP11 CPRB Coprocessor Request Block domains, uses fragile struct overlays. This approach lacks proper ASN.1 Abstract Syntax Notation One encoding validation and bounds...

CVE-2026-63380

A flaw was found in Libevent, an event notification library. This vulnerability allows a local attacker to trigger a null pointer dereference during specific error handling within the evwsnewsession function. By inducing an allocation or locking failure, an attacker can cause the application to...

CVE-2026-81562 AlexGladkov claude-in-mobile client.ts execSync os command injection

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

CVE-2026-81562

CVE-2026-81562 is an OS command injection vulnerability in AlexGladkov claude-in-mobile version 3.10.2 , affecting the execSync function in the file src/adb/client.ts . A local attacker with low privileges can manipulate input to inject operating system commands, leading to partial compromise of ...

CVE-2026-81562 AlexGladkov claude-in-mobile client.ts execSync os command injection

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

cve-2026-31431-checker

Ferramenta de Detecção CVE-2026-31431 Copy Fail Uma ferramenta abrangente de detecção e análise para a vulnerabilidade CVE-2026-31431 "Copy Fail" em kernels Linux. ⚠️ AVISO IMPORTANTE Esta ferramenta é apenas para DETECÇÃO. Ela não explora nem modifica nenhum arquivo do sistema. Apenas lê...

CVE-2026-31431-copy-fail

Copy Fail A maioria dos LPEs Linux precisa de uma janela de corrida ou de um offset específico do kernel. Copy Fail é uma falha lógica de linha reta — não precisa de nenhum dos dois. O mesmo script Python de 732 bytes dá root em todas as distribuições Linux lançadas desde 2017. Execução rápida:...

Weekly-Breach-Investigation--006

Vulnerabilidade de Cópia com Falha CVE-2026-31431 Resumo Falha de escalonamento de privilégios local de alta gravidade no kernel Linux, permitindo que usuários sem privilégios obtenham acesso root ao corromper o cache de páginas em memória. Afeta distribuições Linux desde 2017 e apresenta riscos...

cve-2026-31431-algif-aead-remediator

CVE-2026-31431 / GHSA-2274-3hgr-wxv6 — algifaead-Remediator Schweregrad: Hoch CVSS 7.8 — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Hintergrund CVE-2026-31431 ist eine lokale Privilegieneskalations-Schwachstelle im algifaead-Modul des Linux-Kernels AFALG-AEAD-Krypto-Socket-Schnittstelle. Ein...